Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
File: mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft (raw, json)
Hash identifier: 7/VtWY3u3gZSw6BaPUPCada5Brw/UPD1rUffVG8EAis=
Subject key identifier: 1E:4A:D3:3B:50:D3:F1:33:47:C4:23:01:D6:2C:6A:40:B2:72:E2:4D
Authority key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
Certificate issuer: /CN=9944078b40772b172c7046e7446204980ceae139
Certificate serial: 0199FD6B3CCED94702628807652F11B2687B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
Manifest number: 16B8
Signing time: Sun 19 Oct 2025 17:01:27 +0000
Manifest this update: Sun 19 Oct 2025 17:01:27 +0000
Manifest next update: Mon 20 Oct 2025 17:01:27 +0000
Files and hashes: 1: Ku7W6RCmGf1FMZYF6bxZkcHlJ3U.roa (hash: yodxfHzeCCrONRmxjgNBHi9TEwJB+PIep9C2GIrnRgo=)
2: mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl (hash: xHuEm0GxDCgF+AABbwSO8L2zIaQYjTLOCPGZ44viKMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:3c:ce:d9:47:02:62:88:07:65:2f:11:b2:68:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944078b40772b172c7046e7446204980ceae139
Validity
Not Before: Oct 19 17:01:27 2025 GMT
Not After : Oct 20 17:01:27 2025 GMT
Subject: CN=1e4ad33b50d3f13347c42301d62c6a40b272e24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:22:5a:a2:bd:b3:b0:68:d0:39:4e:f1:77:
da:82:25:81:eb:e5:44:b9:c2:3d:8a:a1:b3:90:35:
08:fc:f5:11:62:61:49:d2:12:e1:9d:5f:5d:78:b7:
68:34:89:fd:cf:c7:df:ee:8d:4b:1d:e6:b6:e7:aa:
b3:92:00:b5:fb:e8:b0:0d:32:aa:29:cb:ce:4e:ae:
e6:6c:9e:46:79:eb:f6:32:f6:1b:40:c2:c7:25:cd:
d8:70:fc:c0:c0:88:82:18:62:fb:14:59:c1:4d:c5:
52:3b:03:3e:4c:1d:98:42:5f:32:30:46:8a:1e:0e:
cf:83:2e:32:a5:06:33:f1:32:28:f9:f4:47:3b:5c:
db:d0:64:3a:12:5f:a8:4e:2a:8d:c7:ae:7b:39:43:
52:1b:bf:c7:dd:a4:39:10:3e:8b:35:6c:14:07:43:
1f:4a:33:b8:84:b2:a5:73:15:3b:ad:06:73:d0:a5:
bb:d9:68:b8:60:1b:75:5a:22:c5:5f:f1:1b:13:7a:
b7:21:09:7a:a7:16:27:e5:97:98:75:bc:d8:ce:62:
c7:65:81:90:b2:4b:12:4e:f7:3a:d0:59:d1:5f:18:
2c:36:26:32:4b:ff:7d:af:4a:d1:c6:18:20:7d:8d:
d2:63:74:db:38:87:43:1d:87:10:39:52:53:65:ca:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4A:D3:3B:50:D3:F1:33:47:C4:23:01:D6:2C:6A:40:B2:72:E2:4D
X509v3 Authority Key Identifier:
keyid:99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e6:49:5a:f2:ce:ae:09:e0:a8:25:44:44:79:ea:65:0b:ad:
f1:d7:23:3d:2d:ed:a8:d6:29:cb:c2:c7:72:52:e7:e8:fb:4d:
82:20:fc:be:5c:cd:6c:89:19:3b:88:e7:96:9f:71:5f:42:9c:
7d:2c:5d:f3:12:2a:ad:70:2b:6e:c0:fc:d5:64:3e:8a:8e:6a:
ef:d7:cb:20:75:17:d9:ce:28:24:14:46:57:aa:d3:02:62:e7:
ff:f7:4c:4f:52:4c:9d:90:19:26:41:22:97:87:ad:83:5e:a1:
ae:80:9b:8c:6b:22:f1:3c:2f:32:74:1d:a5:10:70:cd:68:66:
5e:a3:0a:fc:8e:6f:eb:2d:10:b1:17:c5:65:bf:10:26:90:fe:
4d:1c:9e:06:82:ec:16:9e:5b:aa:83:5a:71:4f:0e:14:1a:f3:
81:19:3e:04:a2:8e:4c:12:df:f4:14:4b:e8:c9:37:85:8b:6e:
d2:49:e8:3a:ca:71:54:f3:f6:ef:4d:ef:98:6c:b8:0f:dc:3e:
b3:1a:60:b0:38:9d:83:1e:9e:be:29:ea:af:72:45:f4:81:e4:
0c:ad:01:47:94:a3:5e:04:ca:2f:b8:cc:19:ee:9d:0f:fc:27:
53:8d:e0:cb:c8:8e:7e:11:c7:36:08:22:58:b4:d4:87:ef:3c:
79:9b:96:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:32 2025 by rpki-client